Privacy Policy

pidly is a software service for engineering drawings, based in Perth, Western Australia. This policy explains what personal information we collect, why, and what we do with it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

If you have a question about this policy or your information, email us at admin@pidly.com.au.

Your account. When you create a pidly account we collect your name and email address and a password. We store the password only as a one-way hash, never in a form we can read. You may add a profile photo. If you turn on two-factor sign-in we store the secret your authenticator app uses and a hashed copy of your recovery codes. We keep a record of sign-ins (such as when you last signed in and your active sessions) to keep your account secure.

Your work. pidly stores the drawings and documents you upload or link, and what you create on them: markups, comments, tasks, detected objects, regions, document properties and the text read from the drawings. It also keeps a record of activity in a project (for example who changed which markup and when) so a team can see what happened.

SharePoint. If your organisation connects a SharePoint site, pidly reads the folders and files you choose through Microsoft Graph and keeps a working copy of the files you open. pidly only reaches the sites your organisation has approved.

Other data sources. If your organisation connects another system to pidly (for example a data source for equipment records), pidly reads from it only when you ask it to, using the connection your organisation set up.

Website visits. On this website and on the pidly sign-in pages we count visits to understand how people find us. This uses no cookies. We do not store your IP address: each visitor is counted under an anonymous code that changes every day, and we keep only the country, the type of device and browser, the page, and where the visit came from. Known bots are ignored, and if your browser sends a Do Not Track or Global Privacy Control signal we do not count the visit at all. These statistics are not used inside the signed-in pidly app.

• To run your account and the pidly service: signing you in, storing your projects and showing them to the people you share them with.
• To send the emails the service needs, such as verifying your email address, resetting a password, invitations and task notifications.
• To provide the features you choose to use, including reading text from drawings, detecting symbols and the pidly AI assistant.
• To keep pidly secure and working, including investigating errors and misuse.
• To understand, in anonymous totals, how people use this website.

We do not sell personal information, and we do not use it for advertising.

We use a small number of service providers to run pidly. They handle information on our behalf and only for that purpose:

• Vercel, which hosts this website and the pidly app.
• Railway, which hosts pidly's servers and database.
• Modal, which runs pidly's symbol detection.
• Resend, which sends pidly's emails.
• Microsoft, for SharePoint connections (through Microsoft Graph) and for reading text from drawings (Azure Document Intelligence).
• Anthropic (Claude) and Google (Gemini), when you use pidly's AI features. The content of the request, such as your question, the text or an image of the part of a drawing involved, is sent to them to produce an answer.

Inside pidly, your work is visible to the members of the projects and workspaces you share it with, according to the roles your organisation sets.

We may also disclose information where the law requires it.

Some of our service providers, including our hosting and AI providers, may store or process information outside Australia, for example in the United States. We choose providers that protect information to a recognised standard, but their systems and the laws that apply to them may differ from Australia's.

The pidly app stores a small amount of information in your browser to keep you signed in and to remember your preferences (such as your theme and panel layout). Some preferences are also saved to your account so they follow you to another computer. This website does not set cookies for visit statistics.

We keep your account and your projects for as long as your account is open. When you delete your account, we delete your account information. Projects that belong to an organisation stay with that organisation. Anonymous website visit statistics are kept as totals and cannot be traced back to you.

We protect your information with measures such as encrypted connections, hashed passwords, optional two-factor sign-in and access controls inside each project. No system is completely secure, so if you think your account has been misused, please tell us straight away at admin@pidly.com.au.

You can see and correct your account details in your account settings. You can download a copy of your account information from there, and you can delete your account. If you would like access to other information we hold about you, or want something corrected or removed, email admin@pidly.com.au and we will respond within a reasonable time.

If you have a concern about how we have handled your personal information, please contact us first at admin@pidly.com.au so we can try to put it right. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as pidly changes. When we do, we will change the date at the top of this page, and for significant changes we will let account holders know.